Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Pending Approval

The following branches are pending approval. To create them, click on a checkbox below.

• chore(deps): update confluentinc/cp-kafka docker tag to v8
• chore(deps): update dpage/pgadmin4 docker tag to v9
• fix(deps): update dependency net.logstash.logback:logstash-logback-encoder to v9
• fix(deps): update dependency org.springdoc:springdoc-openapi-starter-webmvc-ui to v3
• fix(deps): update dependency org.springframework.boot:spring-boot-starter-parent to v4
• 🔐 Create all pending approval PRs at once 🔐

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): pin dependencies (confluentinc/cp-kafka, minio/mc, provectuslabs/kafka-ui, quay.io/minio/minio, registry.access.redhat.com/ubi9/openjdk-21-runtime)
• chore(deps): update klg71/keycloakmigration docker tag to v0.2.125
• chore(deps): update axllent/mailpit docker tag to v1.29.1
• chore(deps): update confluentinc/cp-kafka docker tag to v7.9.5
• chore(deps): update confluentinc/cp-zookeeper docker tag to v7.9.5
• chore(deps): update dependency boto3 to v1.42.49
• chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v2.46.1
• chore(deps): update dependency org.apache.maven.plugins:maven-pmd-plugin to v3.28.0
• chore(deps): update dependency org.sonatype.central:central-publishing-maven-plugin to v0.10.0
• fix(deps): update dependency io.minio:minio to v8.6.0
• fix(deps): update dependency org.apache.commons:commons-lang3 to v3.20.0
• fix(deps): update dependency org.apache.commons:commons-text to v1.15.0
• fix(deps): update dependency org.springframework.cloud:spring-cloud-dependencies to v2025.1.1
• chore(deps): update actions/checkout action to v6
• chore(deps): update dependency com.diffplug.spotless:spotless-maven-plugin to v3
• Click on this checkbox to rebase all open PRs at once

Detected Dependencies

docker-compose (2)

dispatch-service/stack/docker-compose.yml (9)

• postgres 17.4-alpine3.20@sha256:67c27fd3b866e5e3da543b37c70654a13d45d5c4bcb3a2cd9b2813a5c9e167dd
• dpage/pgadmin4 8.14@sha256:8a68677a97b8c8d1427dc915672a26d2c4a04376916a68256f53d669d6171be7 → [Updates: 9.12]
• confluentinc/cp-zookeeper 7.8.6@sha256:b93c9edcdf05de005063ba26f72eda4611d40c530828bb8847c8f848189d9adc → [Updates: 7.9.5]
• confluentinc/cp-kafka 7.8.6@sha256:778f64413532f180148569116b3f5d734e7f1c0cdee650b984f88fd97a20a4f9 → [Updates: 7.9.5, 8.1.1]
• provectuslabs/kafka-ui unknown version → [Updates: undefined]
• confluentinc/cp-kafka latest → [Updates: latest]
• quay.io/minio/minio latest → [Updates: latest]
• minio/mc unknown version → [Updates: undefined]
• axllent/mailpit v1.20.7@sha256:7eef0f38dbc85e4e264f2edf5d70fbb694826791e05cb2cae4fc9e3282f968f5 → [Updates: v1.29.1]

matching-service/stack/docker-compose.yml (4)

• postgres 17.4-alpine3.20@sha256:67c27fd3b866e5e3da543b37c70654a13d45d5c4bcb3a2cd9b2813a5c9e167dd
• dpage/pgadmin4 8.14@sha256:8a68677a97b8c8d1427dc915672a26d2c4a04376916a68256f53d669d6171be7 → [Updates: 9.12]
• quay.io/keycloak/keycloak 26.2.5@sha256:4883630ef9db14031cde3e60700c9a9a8eaf1b5c24db1589d6a2d43de38ba2a9
• klg71/keycloakmigration 0.2.81@sha256:2c73c904a644b75637a01434f357caee9c029f37bd8960793c68233d5afa468a → [Updates: 0.2.125]

dockerfile (5)

dipa-service/Dockerfile (1)

• registry.access.redhat.com/ubi9/openjdk-21-runtime unknown version → [Updates: undefined]

dispatch-service/Dockerfile (1)

• registry.access.redhat.com/ubi9/openjdk-21-runtime unknown version → [Updates: undefined]

dms-service/Dockerfile (1)

• registry.access.redhat.com/ubi9/openjdk-21-runtime unknown version → [Updates: undefined]

invoice-service/Dockerfile (1)

• registry.access.redhat.com/ubi9/openjdk-21-runtime unknown version → [Updates: undefined]

matching-service/Dockerfile (1)

• registry.access.redhat.com/ubi9/openjdk-21-runtime unknown version → [Updates: undefined]

github-actions (6)

.github/workflows/codeql.yml (5)

• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4
• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4
• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4
• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4
• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4

.github/workflows/dependency_review.yaml (1)

• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4

.github/workflows/dockercompose-healthcheck.yml (2)

• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4
• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4

.github/workflows/maven-node-build.yaml (4)

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd → [Updates: v6.0.2]
• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4
• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4
• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4

.github/workflows/pr-labeler.yaml (1)

• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4

.github/workflows/release.yaml (3)

• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4
• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4
• it-at-m/lhm_actions v1.0.23@e012d3bda6f9d5511415e2d885f32826049284a4

maven (6)

dipa-service/pom.xml (22)

• org.springframework.boot:spring-boot-starter-parent 3.5.10 → [Updates: 4.0.2]
• org.springframework.cloud:spring-cloud-dependencies 2025.0.1 → [Updates: 2025.1.1]
• de.muenchen.oss.swim:handler-core 0.5.0
• org.mapstruct:mapstruct 1.6.3
• com.github.spotbugs:spotbugs-annotations 4.9.8
• org.apache.cxf:cxf-rt-bindings-soap 4.1.4
• org.apache.cxf:cxf-rt-transports-http 4.1.4
• org.apache.cxf:cxf-rt-frontend-jaxws 4.1.4
• com.sun.xml.ws:jaxws-rt 4.0.3
• net.logstash.logback:logstash-logback-encoder 8.1 → [Updates: 9.0]
• org.apache.commons:commons-text 1.13.1 → [Updates: 1.15.0]
• org.mapstruct:mapstruct-processor 1.6.3
• org.projectlombok:lombok-mapstruct-binding 0.2.0
• org.apache.cxf:cxf-codegen-plugin 4.1.4
• org.jacoco:jacoco-maven-plugin 0.8.14
• org.apache.maven.plugins:maven-release-plugin 3.3.1
• com.diffplug.spotless:spotless-maven-plugin 2.45.0 → [Updates: 2.46.1, 3.2.1]
• de.muenchen.oss:itm-java-codeformat 1.0.10
• org.apache.maven.plugins:maven-pmd-plugin 3.27.0 → [Updates: 3.28.0]
• de.muenchen.refarch.tools:refarch-pmd 1.2.0
• com.github.spotbugs:spotbugs-maven-plugin 4.9.8.2
• com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0

dispatch-service/pom.xml (18)

• org.springframework.boot:spring-boot-starter-parent 3.5.10 → [Updates: 4.0.2]
• org.springframework.cloud:spring-cloud-dependencies 2025.0.1 → [Updates: 2025.1.1]
• org.mapstruct:mapstruct 1.6.3
• com.github.spotbugs:spotbugs-annotations 4.9.8
• io.minio:minio 8.5.17 → [Updates: 8.6.0]
• net.logstash.logback:logstash-logback-encoder 8.1 → [Updates: 9.0]
• org.apache.commons:commons-collections4 4.5.0
• org.apache.commons:commons-lang3 3.18.0 → [Updates: 3.20.0]
• org.mapstruct:mapstruct-processor 1.6.3
• org.projectlombok:lombok-mapstruct-binding 0.2.0
• org.jacoco:jacoco-maven-plugin 0.8.14
• org.apache.maven.plugins:maven-release-plugin 3.3.1
• com.diffplug.spotless:spotless-maven-plugin 2.45.0 → [Updates: 2.46.1, 3.2.1]
• de.muenchen.oss:itm-java-codeformat 1.0.10
• org.apache.maven.plugins:maven-pmd-plugin 3.27.0 → [Updates: 3.28.0]
• de.muenchen.refarch.tools:refarch-pmd 1.2.0
• com.github.spotbugs:spotbugs-maven-plugin 4.9.8.2
• com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0

dms-service/pom.xml (18)

• org.springframework.boot:spring-boot-starter-parent 3.5.10 → [Updates: 4.0.2]
• org.springframework.cloud:spring-cloud-dependencies 2025.0.1 → [Updates: 2025.1.1]
• de.muenchen.oss.swim:handler-core 0.5.0
• org.mapstruct:mapstruct 1.6.3
• com.github.spotbugs:spotbugs-annotations 4.9.8
• de.muenchen.refarch:refarch-dms-integration-fabasoft-rest-api 2.2.1
• net.logstash.logback:logstash-logback-encoder 8.1 → [Updates: 9.0]
• org.apache.commons:commons-text 1.13.1 → [Updates: 1.15.0]
• org.mapstruct:mapstruct-processor 1.6.3
• org.projectlombok:lombok-mapstruct-binding 0.2.0
• org.jacoco:jacoco-maven-plugin 0.8.14
• org.apache.maven.plugins:maven-release-plugin 3.3.1
• com.diffplug.spotless:spotless-maven-plugin 2.45.0 → [Updates: 2.46.1, 3.2.1]
• de.muenchen.oss:itm-java-codeformat 1.0.10
• org.apache.maven.plugins:maven-pmd-plugin 3.27.0 → [Updates: 3.28.0]
• de.muenchen.refarch.tools:refarch-pmd 1.2.0
• com.github.spotbugs:spotbugs-maven-plugin 4.9.8.2
• com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0

handler-core/pom.xml (14)

• org.springframework.boot:spring-boot-starter-parent 3.5.10 → [Updates: 4.0.2]
• org.springframework.cloud:spring-cloud-dependencies 2025.0.1 → [Updates: 2025.1.1]
• org.apache.commons:commons-text 1.13.1 → [Updates: 1.15.0]
• com.github.spotbugs:spotbugs-annotations 4.9.8
• org.jacoco:jacoco-maven-plugin 0.8.14
• org.apache.maven.plugins:maven-release-plugin 3.3.1
• com.diffplug.spotless:spotless-maven-plugin 2.45.0 → [Updates: 2.46.1, 3.2.1]
• de.muenchen.oss:itm-java-codeformat 1.0.10
• org.apache.maven.plugins:maven-pmd-plugin 3.27.0 → [Updates: 3.28.0]
• de.muenchen.refarch.tools:refarch-pmd 1.2.0
• com.github.spotbugs:spotbugs-maven-plugin 4.9.8.2
• com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0
• org.sonatype.central:central-publishing-maven-plugin 0.8.0 → [Updates: 0.10.0]
• org.apache.maven.plugins:maven-gpg-plugin 3.2.8

invoice-service/pom.xml (22)

• org.springframework.boot:spring-boot-starter-parent 3.5.10 → [Updates: 4.0.2]
• org.springframework.cloud:spring-cloud-dependencies 2025.0.1 → [Updates: 2025.1.1]
• de.muenchen.oss.swim:handler-core 0.5.0
• org.apache.cxf:cxf-core 4.1.4
• org.apache.cxf:cxf-rt-bindings-soap 4.1.4
• jakarta.xml.bind:jakarta.xml.bind-api 4.0.5
• com.sun.xml.ws:jaxws-rt 4.0.3
• org.mapstruct:mapstruct 1.6.3
• com.github.spotbugs:spotbugs-annotations 4.9.8
• net.logstash.logback:logstash-logback-encoder 8.1 → [Updates: 9.0]
• org.apache.commons:commons-text 1.13.1 → [Updates: 1.15.0]
• org.mapstruct:mapstruct-processor 1.6.3
• org.projectlombok:lombok-mapstruct-binding 0.2.0
• org.apache.cxf:cxf-codegen-plugin 4.1.4
• org.jacoco:jacoco-maven-plugin 0.8.14
• org.apache.maven.plugins:maven-release-plugin 3.3.1
• com.diffplug.spotless:spotless-maven-plugin 2.45.0 → [Updates: 2.46.1, 3.2.1]
• de.muenchen.oss:itm-java-codeformat 1.0.10
• org.apache.maven.plugins:maven-pmd-plugin 3.27.0 → [Updates: 3.28.0]
• de.muenchen.refarch.tools:refarch-pmd 1.2.0
• com.github.spotbugs:spotbugs-maven-plugin 4.9.8.2
• com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0

matching-service/pom.xml (20)

• org.springframework.boot:spring-boot-starter-parent 3.5.10 → [Updates: 4.0.2]
• org.springframework.cloud:spring-cloud-dependencies 2025.0.1 → [Updates: 2025.1.1]
• org.mapstruct:mapstruct 1.6.3
• org.springdoc:springdoc-openapi-starter-webmvc-ui 2.8.15 → [Updates: 3.0.1]
• com.github.therapi:therapi-runtime-javadoc 0.15.0
• com.github.spotbugs:spotbugs-annotations 4.9.8
• de.muenchen.refarch:refarch-dms-integration-fabasoft-rest-api 2.2.1
• net.logstash.logback:logstash-logback-encoder 8.1 → [Updates: 9.0]
• org.apache.commons:commons-lang3 3.18.0 → [Updates: 3.20.0]
• org.mapstruct:mapstruct-processor 1.6.3
• org.projectlombok:lombok-mapstruct-binding 0.2.0
• com.github.therapi:therapi-runtime-javadoc-scribe 0.15.0
• org.jacoco:jacoco-maven-plugin 0.8.14
• org.apache.maven.plugins:maven-release-plugin 3.3.1
• com.diffplug.spotless:spotless-maven-plugin 2.45.0 → [Updates: 2.46.1, 3.2.1]
• de.muenchen.oss:itm-java-codeformat 1.0.10
• org.apache.maven.plugins:maven-pmd-plugin 3.27.0 → [Updates: 3.28.0]
• de.muenchen.refarch.tools:refarch-pmd 1.2.0
• com.github.spotbugs:spotbugs-maven-plugin 4.9.8.2
• com.h3xstream.findsecbugs:findsecbugs-plugin 1.14.0

pip_requirements (1)

scripts/requirements.txt (1)

• boto3 ==1.37.38 → [Updates: ==1.42.49]

renovate-config-presets (1)

renovate.json5

---

• Check this box to trigger a request for Renovate to run again on this repository